Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8058E24544111F08BD863D3DAE4EC9C.roa
File: E8058E24544111F08BD863D3DAE4EC9C.roa (raw, json)
Hash identifier: VyZHz1CNutUph9KctrR6stBAIEBrUkh2hxrnwCb1Jbg=
Subject key identifier: 0B:E5:A4:72:1F:A2:5D:4B:78:7E:43:97:B1:31:83:1F:CE:A6:0D:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8058E24544111F08BD863D3DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 17:04:09 +0000
ROA not before: Sat 28 Jun 2025 17:04:04 +0000
ROA not after: Tue 26 Aug 2025 17:04:04 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.115.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89951 (0x15f5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 17:04:04 2025 GMT
Not After : Aug 26 17:04:04 2025 GMT
Subject: CN=68602089-e757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:3e:2f:b2:fa:90:79:91:a9:23:92:a3:e5:
3e:32:67:e5:e7:cc:2f:cd:db:33:02:db:2c:f2:06:
69:75:90:4a:e5:4a:dd:65:bc:e9:40:24:a3:2a:a0:
38:f6:a2:1e:01:1b:c6:e0:88:10:59:00:6c:38:03:
ce:70:a5:1b:97:b7:c1:a9:ec:00:c2:2b:df:13:7b:
99:3c:3b:6b:f4:17:63:98:06:71:a3:4a:83:3e:d3:
57:5b:f5:b8:1b:d6:72:96:31:72:40:0e:54:3a:98:
8c:44:b6:67:b4:67:15:d8:53:2a:8a:f2:1b:d9:e8:
a8:66:77:f8:21:6f:51:55:fd:14:49:36:79:07:ee:
14:38:c1:69:89:c8:55:de:9d:4e:92:0e:c2:77:db:
5a:b3:ce:0d:87:3c:78:e8:df:8a:1c:bc:1d:3a:ec:
9d:40:88:88:cb:48:ca:d5:d2:aa:b5:6e:8e:52:a6:
7d:6c:12:f7:48:68:f2:d8:b0:66:11:18:5f:7a:ab:
77:35:77:80:99:32:3a:d9:9f:58:fc:b8:95:07:2b:
48:fe:02:e7:12:7e:77:b0:35:bf:07:e0:99:85:5f:
cd:9f:cc:55:1d:e5:07:3f:41:0e:e7:f6:a5:f5:3b:
22:b9:55:0b:9f:e8:bc:d7:38:5c:19:5a:e4:08:bb:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:A4:72:1F:A2:5D:4B:78:7E:43:97:B1:31:83:1F:CE:A6:0D:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8058E24544111F08BD863D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.120.255
156.225.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ab:11:63:fa:f6:24:6a:d8:13:e6:81:3f:60:60:22:b7:ca:
4a:90:51:18:9e:4f:b9:14:8e:37:57:74:bb:d8:67:6a:d5:9d:
3c:90:df:a0:8b:c8:ca:7b:e7:36:68:fd:27:76:12:e3:c5:e9:
40:17:71:28:90:ff:55:06:c2:0d:07:af:1c:79:71:03:bd:30:
5b:a8:fb:21:e0:2e:c0:9e:20:78:a3:7d:b4:6b:8c:a9:ec:75:
9c:63:cc:20:71:d8:5e:f1:c4:d9:aa:38:cd:7c:f9:77:a6:e5:
68:d3:2c:85:91:ad:71:37:0b:b1:80:a7:3f:4e:6a:d4:3f:11:
d7:e2:a5:ba:13:e3:41:90:46:b4:0b:18:75:e1:77:6e:19:ea:
6e:70:ed:fb:f9:30:e7:18:8d:40:7f:20:30:ee:6e:a4:b0:19:
63:72:38:c2:de:a2:78:ac:89:ff:c1:18:03:e9:38:8c:3b:ff:
3e:ae:5c:55:bd:9a:ea:81:3d:4c:41:09:82:98:4e:78:54:bc:
c7:70:45:e4:36:91:7b:08:21:a5:cf:24:40:3e:0b:18:4f:5a:
24:18:fb:23:b7:1e:0c:0e:be:69:9d:a2:13:90:9e:c5:10:f7:
a7:26:a6:7b:50:c9:63:60:07:8a:6a:05:74:2c:9d:ba:32:85:
17:67:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:41:31 2025 by rpki-client